What it actually looks like
The picture most families carry is a scam phone call. Those exist, and they are the minority. The larger share involves a family member, a new friend, a paid caregiver or a neighbor who has become indispensable — and in most cases the older adult is handing the money over, not having it stolen behind their back.
Signals that are worth acting on
- New account activity that does not match a lifetime of habits: cash withdrawals from someone who never used cash, wire transfers, gift cards, cryptocurrency.
- A new person who has become the one who drives to appointments, handles the post, and is present for every phone call.
- Documents that have changed recently — a new power of attorney, a new name on a deed or an account, a changed beneficiary — especially where the change followed an illness.
- Bills going unpaid while money is clearly moving.
- Isolation. A previously sociable parent who now sees almost no one, where the new person explains why each visit is a bad time.
- Secrecy and defensiveness about money that was never a private subject before.
Isolation is the signal that most reliably precedes the rest. If someone is managing who gets to speak to your parent, treat that as the thing to address first, before the money.
Seven situations that look identical from outside
Money leaving an older person's account at a rate that alarms their children is the symptom, not the diagnosis. These seven have different evidence, different levers and different people to call, and the single most useful thing a family can do early is work out which one they are looking at — including the possibility that it is the first.
- Spending you disagree with. An adult with capacity may spend, lend and give away their own money, and being wrong about it is their right. There is no lever here, and looking for one damages the relationship you will need if something else is happening.
- A scam by a stranger. Someone impersonating a grandchild, a government agency, a suitor or a contractor. The parent usually authorizes the payment, which is what makes it hard; the reporting path runs to law enforcement and the fraud reporting systems, and the immediate work is stopping what has not yet moved.
- Transactions nobody authorized. A card used without permission, a forged check, an account opened in the parent's name. This is the narrowest category and the one most likely to be reversed, because it is the situation consumer fraud processes were built around. Speed decides the outcome.
- An agent misusing a power of attorney. The transactions are authorized on their face because the document authorizes them. The question is whether the authority is being exercised for the parent or for the agent, and it has its own section below.
- A caregiver or family member with access. Access granted informally — a card handed over for shopping, a name added to an account for convenience — and then used beyond what was intended. The evidence is the pattern of use against what was agreed, and it is rarely documented.
- Undue influence. Someone has made themselves the channel through which the parent sees the world, and the parent's decisions have become that person's decisions. The transfers may be perfectly voluntary in form. What is documented here is the isolation, not the payment.
- Judgment failing with cognitive decline. No one is exploiting anyone; the parent is making decisions they would not have made five years ago, repeatedly and to their own cost. This calls for a clinical conversation and a structural fix, not a report.
These overlap, and more than one is often true at once — a scammer finds a parent whose judgment has already slipped, and a relative steps in to help and then stays too long. Treat the classification as a working hypothesis you keep revising, not a verdict.
A family disagreeing about money is not evidence that anyone is stealing. Siblings routinely reach opposite conclusions about the same set of transactions, and an accusation made from suspicion alone is difficult to withdraw. What distinguishes exploitation from a bad decision is not how much money moved, but whether the decision was actually the parent's.
Not sure which of these is yours?
Prefer a guided path?
Answer a few questions and build a personalized Handbook around your situation.
Sahvelo gives information drawn from statutes, agency guidance and official forms. It is not legal advice for your particular situation. Terms & disclaimer.
Why it is hard to stop, even once you see it
An adult with capacity is entitled to give their money away, to anyone, for any reason, including a reason their children think is foolish. That is not a loophole — it is the same right that lets them buy a boat or fund a grandchild's tuition. The legal question is rarely "is this a bad decision" and almost always "is this decision actually theirs".
That distinction is why the strongest evidence is usually not the transfer itself but the pattern around it: undue influence, isolation from other advisers, a change made days after a hospital stay, or a person who cannot explain their own transaction.
Accusing the wrong person, or the right person too early, usually ends with the older adult defending them and closing the door on you. The people who intervene successfully almost always secure the accounts and gather the record before they open the confrontation.
The brake nothing offers you
Reporting tells an agency. It does not stop the next withdrawal, and the gap between those two things is where the money usually goes. A brokerage holding the account can stop it.Source 2
FINRA's rule lets a firm place a temporary hold on a disbursement or a securities transaction where it reasonably believes financial exploitation has occurred, is occurring, or will be attempted. The standard is the firm's reasonable belief, not proof — which means a family does not have to have established anything before asking the firm to look.Source 2
The rule's own definition of exploitation reaches conduct "through the use of a power of attorney, guardianship, or any other authority". That is a frequent shape of the problem: the person moving the money has the legal right to move it. Having a valid power of attorney is not an answer to the question, and the rule says so.Source 2
The firm must notify people within two business days — but it may skip anyone it reasonably believes is involved in the exploitation, including a party authorized on the account. So a firm is not obliged to warn the suspected exploiter that it has frozen them, which is the difference between a useful hold and a warning shot.Source 3
The form to fill in before anything happens
Notification also runs to the Trusted Contact Person — a name the account holder gives the firm in advance. If nobody was named, there may be no one outside the household for the firm to call. Adding a trusted contact takes a phone call, gives that person no authority over the account and no right to trade it, and is the single cheapest protective step available on the planning side.Source 3
What to ask an ordinary bank, and why they can say yes
A checking account is not covered by the brokerage rule, and families often read a bank's caution as unwillingness. The more useful frame is that federal law has already removed the risk of reporting. A trained employee in a supervisory, compliance or legal role — the statute names the Bank Secrecy Act officer specifically — is protected from civil and administrative liability for disclosing suspected exploitation of an older customer to a covered agency, provided they act in good faith and with reasonable care, and the institution is protected behind them where that training was given.Source 15
So ask for the compliance officer or the Bank Secrecy Act officer by name rather than arguing at a branch counter. Those are the roles the immunity is written around, and they are the people for whom reporting is a protected act rather than a judgment call.Source 15
Do not mistake this for a brake. The federal protection covers disclosure — it creates no power to hold, delay or reverse a transaction, and the statute says it does not reach anything that is not a disclosure. Sahvelo has not established that any state it has read gives an ordinary bank a hold power equivalent to the brokerage rule. Ask the bank what its own policy allows, and treat a hold on a bank account as something it may choose to do rather than something you can require.Source 15
Which rule is doing the work
The levers on this page come from different places, and they do not cover the same accounts. Asking a bank for something that only exists in the brokerage rulebook is how a family concludes that nothing can be done.
- The FINRA rule is a broker-dealer rule. It reaches investment accounts at a member firm — a brokerage, and the brokerage arm of a bank. It does not reach an ordinary checking or savings account.
- State power-of-attorney statutes reach both banks and brokerages, and they are where the answer lives when the person moving the money is the agent. They vary more than a single federal-sounding rule would suggest; the table further down gives the states Sahvelo has read.
- State mandated-reporter law decides who is obliged to report, and in California it makes the bank employee you are speaking to a reporter in their own right.
- Everything else is the institution's own policy. Alerts, a second signatory, a card reissued, a note on the file: none of these is compelled by a rule Sahvelo can cite, and all of them are routinely available for the asking. Policy is not weaker than law here — it is faster.
Ask which of these the institution is relying on, and get the answer in writing where the rule provides for writing. A refusal recorded as “bank policy” and a refusal recorded under a statute are not the same thing later, and only one of them has a remedy attached.
When the person taking the money is the one holding the power of attorney
This is a frequent version of the problem and the one families are least prepared for, because the document they were told to be relieved about is the instrument being used. It helps to see that it raises two separate questions, with different answers and different evidence.Source 2
- Was the document itself obtained properly? A power of attorney signed by someone who could not understand what they were signing, or who was pressured into it, is vulnerable to challenge on that ground alone.
- Is a validly held authority being exercised wrongly? Here the document is sound and the conduct is not, and the question is whether the agent is converting the money or acting outside what was authorized.
The two paths call for different things. The first is a challenge to the instrument, and it turns on what the parent understood on the day they signed. The second does not require unwinding the document at all: an agent owes duties to the person who appointed them, and can be made to account for what they did with the authority whether or not the appointment was valid.
If your parent still has capacity, revoking the power of attorney is the fastest protective step available and does not require anyone to agree about what happened. It is also the step most often delayed, because it feels like an accusation. It is not one — a principal may revoke for any reason or none.
What to ask the institution to do
An institution presented with an agent it has reason to distrust is not obliged to keep honoring the document, and in some of the states Sahvelo has read, a report of exploitation by the agent is written into the statute as a ground for refusing it. That is the practical link between reporting and stopping the money: the report is not only a referral to an agency, it can also be the fact that lets the bank say no.Source 9Source 11
- Ask whether the institution will decline to act on the power of attorney, and on what stated ground.
- Tell it plainly if a report has been made, and to which agency — in Florida and New York that fact is itself the ground the statute names.
- Ask for the refusal in writing where the state requires a written reason, and keep it.
- Ask what happens to transactions already in flight, which is a different question from what happens next.
This cuts both ways, and it is why the page does not tell you to report as a tactic. A refusal wrongly given exposes the institution — Florida and New York both allow a court to order acceptance and to shift legal costs onto the party that refused. The same machinery protects an agent who is doing nothing wrong, which is the correct outcome when a family is mistaken about who is at fault.Source 10Source 12
There is an instrument working against you here, and a family should know it exists before they are surprised by it. In Arizona and California an agent may sign an affidavit stating they had no actual knowledge that the power was revoked or the principal had died. Arizona treats that as a rebuttable presumption the power is still live. California treats it as conclusive proof, as to acts undertaken in good faith reliance on it. It is a legitimate tool — it is how an honest agent gets a hesitant bank to act — and it is equally available to an agent who should not be acting at all, because it removes the institution's residual risk in honoring the document. Where you are asking an institution to stop honoring a power of attorney, expect the affidavit to be the answer, and put the reason for distrust to them in writing so their reliance is no longer unqualified.Source: A.R.S. §14-5505 — the agent's affidavit of non-revocation (opens in a new tab)•Source: Cal. Prob. Code §4305 — the attorney-in-fact's affidavit as conclusive proof (opens in a new tab)•
What your state gives you here varies more than almost anything else on this page — Arizona moves a burden of proof, California routes the question through the institution's own good faith, Florida and New York name the report in the statute. The table below sets out the four Sahvelo has read.
What to do, in order
- Address the isolation before the money. Whoever is controlling access is the thing to work on first, and confronting them about finances usually tightens that control.
- Write down what you have actually seen, with dates — transfers, new names on accounts, a document signed shortly after a hospital stay, a caregiver who now drives to every appointment.
- Call the financial institution and ask what it can do. For a brokerage, that includes a temporary hold and an internal review; ask for both by name.
- Ask whether a trusted contact is on file, and if your parent is willing, add one now.
- Report to adult protective services or the hotline your state uses. Reporting is not accusation and in most states you need suspicion rather than evidence.
- Preserve the paper: statements, the power of attorney, any new will or deed, texts and emails. Recovery cases turn on the pattern, not on a single transfer.
- Get a lawyer involved where a document has been changed, where a power of attorney is being used, or where property has moved. Those are the situations where waiting makes recovery harder.
Do not confront the suspected person first. The people who intervene successfully almost always secure the practical protections — the hold, the trusted contact, the report — before anyone is accused, because an accusation that lands badly ends with the older adult defending them and closing the door.
What to do, in order
The first day is about visibility and containment. Reporting comes next, and it works better with the record in hand.
The first day
As soon as you suspect it
Nothing here requires proof, an accusation, or your parent's agreement about what is happening.
-
Immediately
Deal with immediate danger first
If the older adult is in physical danger, or a transfer is happening right now, that is a call to 911 and to the bank's fraud line, not a research task. Everything else on this page can wait an hour. -
Start the record before you do anything else
Open a file and date everything: what you saw, the amounts, the account, who was present, what was said. Photograph or download statements now, while you still have access.Do after: danger
Access is the thing you are most likely to lose once the situation becomes contested, and the record is what every later step runs on.
-
Call the bank or credit union, not just the branch
Ask for the fraud or elder-protection team by name. Banks have processes for exactly this, including transaction alerts, holds, and in some cases a temporary freeze on a disbursement they believe is suspicious.Source 6- Ask what alerts can be set on the account, and whether a trusted contact can be added.
- Ask whether a hold can be placed on pending transfers while the matter is reviewed.
- In California, the employees you are talking to are themselves mandated reporters of suspected financial abuse, which changes the conversation.
Do after: document
-
Close the routes that are still open
Cancel cards that have been shared, change online banking credentials that others know, and stop automatic payments to the person or entity involved. If a power of attorney is being used to do this, revoking it is a separate and urgent step.Do after: document
-
Freeze the credit files
A freeze at each of the three credit bureaus stops new accounts being opened in your parent's name. It is free, it is reversible, and it addresses the half of the problem that statements do not show.Do after: document
The first week
Days two to seven
-
Report it to adult protective services
Every state runs a protective-services program for vulnerable adults, and a report can be made by anyone who is concerned — you do not need proof, and you are not making an accusation the state will hold you to. Where you report, and whether you are legally obliged to, is the part that varies; see the table below.Source 1Do after: document
-
Make a police report if money has actually gone
A police report is often what a bank needs before it will reverse anything, and what an insurer needs before it will consider a claim. Take the dated record with you.Do after: document
The report number becomes the reference every other institution asks for.
-
Report the fraud federally where it applies
Scams and frauds — as distinct from exploitation by someone known — belong with the Federal Trade Commission, and the Department of Justice runs a national hotline for older victims that also routes to local help.Do after: document
-
Check whether benefits are being diverted
If someone is receiving Social Security payments on your parent's behalf as a representative payee, misuse of those funds is reported to Social Security itself, separately from anything else you do.Do after: document
Once it is contained
Weeks two and after
-
Review every document that could have been changed
Powers of attorney, deeds, beneficiary designations, account ownership and any recent will. A change made under influence is a different problem from a transfer, and it is the one that survives to do damage after a death.Do after: report aps
-
Put legitimate authority in place
If there is no valid power of attorney, or the existing one is the instrument being abused, this is the moment to deal with it. A parent with capacity can revoke and re-execute. A parent without capacity leaves guardianship as the only route, which is slower, public and expensive.Do after: documents review
-
Get advice on recovery, honestly scoped
An elder law attorney can advise on undue influence, civil claims and guardianship. Ask early what recovery realistically costs and what it is likely to return, because for smaller losses the answer is often that prevention is the only economic remedy.Do after: documents review
How to raise it without losing the relationship
This section is Sahvelo's judgment rather than a rule from a source. The sourced material on this page is the reporting duties further down, and where a report goes. What follows is what tends to work and what tends to backfire, and reasonable people disagree about some of it.
Separate protecting the money from naming the culprit
Instead of opening with the accusation and losing access to everything
Ask about the transaction, not about the person
Instead of a question that requires them to admit they were fooled
Do not make it a test of loyalty
Instead of an ultimatum
Write down what you noticed, when you noticed it
Instead of relying on memory and outrage
Expect the money to be gone
Instead of delaying protective steps while pursuing recovery of what has already gone
Who must report, and where a report goes
Anyone may report suspected exploitation in all four states. The question this table answers is different and sharper: whether you are legally obliged to, and what the obligation is if you hold a professional position — a caregiver, a nurse, a bookkeeper, a branch manager.
Who is legally obliged to report
The answer differs more by state than the question suggests
The answer in 8 states
-
Arizona
Listed professionals — health professionals, care providers, social workers, peace officers, guardians and conservators — plus anyone else responsible for the adult's care. Separately, anyone responsible for their tax records or for the use or preservation of their property, which reaches accountants, attorneys and trustees.Source 4 -
California
A defined class of mandated reporters: anyone who has assumed responsibility for the care or custody of an elder, care custodians, health practitioners, clergy, and adult protective services or law enforcement employees. A separate section makes every officer and employee of a bank or credit union a mandated reporter of financial abuse specifically.Source 5Source 6 -
Florida
Any person. The statute lists professions — including bank, savings and loan and credit union officers, trustees and employees, and investment advisers — but states the duty as falling on any person who knows or has reasonable cause to suspect.Source 7 -
Illinois
Not established. Sahvelo added Illinois to this topic on its power-of-attorney refusal rules and has not read its law on this point. -
New York
No general duty on a private person appears in the protective-services section. The duty it does impose runs the other way: where a social services official suspects a crime, that official must report it to the police and the district attorney.Source 8 -
Ohio
Not established. Sahvelo added Ohio to this topic on its power-of-attorney refusal rules and has not read its law on this point. -
Pennsylvania
Not established. Sahvelo added Pennsylvania to this topic on its power-of-attorney refusal rules and has not read its law on this point. -
Texas
Not established. Sahvelo added Texas to this topic on its power-of-attorney refusal rules and has not read its law on this point.
Where the report goes
The answer in 8 states
-
Arizona
A peace officer, or the adult protective services central intake unit. Reports must be made immediately, by telephone or online.Source 4 -
California
By telephone or through the confidential internet reporting tool, immediately or as soon as practicably possible; a telephone report must be followed by a written or internet report within two working days.Source 5 -
Florida
The central abuse hotline, immediately.Source 7 -
Illinois
Not established. Sahvelo added Illinois to this topic on its power-of-attorney refusal rules and has not read its law on this point. -
New York
The local social services district, which has the statutory duty to receive and investigate reports, or the statewide adult protective services helpline.Source 8 -
Ohio
Not established. Sahvelo added Ohio to this topic on its power-of-attorney refusal rules and has not read its law on this point. -
Pennsylvania
Not established. Sahvelo added Pennsylvania to this topic on its power-of-attorney refusal rules and has not read its law on this point. -
Texas
Not established. Sahvelo added Texas to this topic on its power-of-attorney refusal rules and has not read its law on this point.
What happens if a person who must report stays quiet
The answer in 8 states
-
Arizona
A class 1 misdemeanor, rising to a class 6 felony where the failure involves one of the offenses listed in title 13, chapter 14. Retaliation against a reporter is prohibited, and adverse action within ninety days is presumed to be retaliation.Source 4 -
California
The reporting duty is statutory and enforced through the penalties in the Elder Abuse and Dependent Adult Civil Protection Act; the obligation on financial institutions is separately stated.Source 5Source 6 -
Florida
The duty is mandatory and stated in the reporting statute itself; a knowing failure to report is treated as an offense under chapter 415.Source 7 -
Illinois
Not established. Sahvelo added Illinois to this topic on its power-of-attorney refusal rules and has not read its law on this point. -
New York
Not applicable to a private reporter, there being no general duty in this section to breach.Source 8 -
Ohio
Not established. Sahvelo added Ohio to this topic on its power-of-attorney refusal rules and has not read its law on this point. -
Pennsylvania
Not established. Sahvelo added Pennsylvania to this topic on its power-of-attorney refusal rules and has not read its law on this point. -
Texas
Not established. Sahvelo added Texas to this topic on its power-of-attorney refusal rules and has not read its law on this point.
When the suspect is the agent under the power of attorney
The four states answer this in genuinely different currencies
The answer in 8 states
-
Arizona
Arizona moves a burden of proof rather than naming a ground for refusal. A power of attorney signed by an adult without capacity is invalid, and where the challenger proves the parent was a vulnerable adult when it was executed, it falls to the agent to prove capacity by clear and convincing evidence. An agent who used intimidation or deception to procure the document faces criminal prosecution and civil penalties. Note the provision running the other way: a person who in good faith deals with an agent is protected even after that agent's authority has ended, which limits what can be unwound from third parties.Source 13 -
California
California does not, in the section Sahvelo has read, name an exploitation report as a ground for refusing the agent. Its rule is fee-shifting with a good-faith exception: an institution that refuses an agent backed by an affidavit is liable for the agent's legal costs unless it believed in good faith that the agent was not qualified, or was attempting to exceed or improperly exercise their authority. That exception is where suspected exploitation lands, so what matters is putting the observations in front of the institution rather than citing a statute at it.Source 14 -
Florida
Florida writes it into the statute. A third person need not accept a power of attorney where it makes, or knows another person has made, a report to the local adult protective services office stating a good-faith belief that the principal may be subject to abuse, neglect, exploitation or abandonment by the agent. A report by the family supplies the ground, and no agency finding is needed. A rejection on that basis must be given in writing. Refusing wrongly exposes the institution to a court order compelling acceptance and to the family's legal costs.Source 9Source 10 -
Illinois
Illinois has no clock and a duty with teeth instead: anyone to whom the agent gives a direction must comply, and one who fails arbitrarily or without reasonable cause is civilly liable for the resulting damages. The Act then names two grounds as unreasonable refusals, which takes both off the table. Sahvelo has read the reliance and liability section and has not read exploitation named among the reasonable causes for refusing.Source: 755 ILCS 45/2-8 — reliance on a power of attorney, the agent's certification, and unreasonable versus reasonable refusal (opens in a new tab)• -
New York
New York names the same ground and adds a clock. Reasonable cause to refuse includes actual knowledge of a report by any person to the local adult protective services unit alleging exploitation of the principal by the agent, and also the institution's own good-faith referral to that unit. Separately, a third party has ten business days to honor the document or reject it in writing with reasons, and cannot rely on the document not being on its own house form. Enforcement is a special proceeding in which the court may award damages including legal fees.Source 11Source 12 -
Ohio
The question is shaped differently in Ohio, and the shape is the answer. Where Ohio's power of attorney act and the law governing financial institutions conflict, the banking law controls — and Sahvelo read the chapter's published section inventory and found no section corresponding to the uniform act's rules on acceptance of and reliance on an acknowledged power of attorney. So there is no acceptance duty here to be excused from, which means the argument at the counter is with the institution's own policy rather than with a statutory ground.Source: Ohio R.C. 1337.40 — conflict of laws with provisions applicable to financial institutions (opens in a new tab)• -
Pennsylvania
Pennsylvania's section is built around the remedy rather than the grounds. Refusing a valid power of attorney in violation of the section exposes the institution to civil liability for the money the refusal actually costs the principal — a missed sale, a penalty, an unpaid bill — and to a court order compelling acceptance. Sahvelo has read that remedy and has not read a provision naming an exploitation report as a lawful ground for refusing.Source: 20 Pa.C.S. 5608.1 — the remedy for wrongful refusal, and the circumstances where refusal is lawful (opens in a new tab)• -
Texas
Texas does not name an exploitation report as a ground, and its list of grounds is wide enough to reach the situation anyway. A person may refuse where they believe in good faith that the power of attorney is not valid or that the agent does not have the authority they are claiming, where a suspicious activity report has been filed, or where they have actual knowledge that the agent's authority has ended. Sahvelo has read the grounds section and has not read a provision naming adult protective services.Source: Texas Estates Code §§751.206, 751.207, 751.212 — grounds for refusal, the written statement, and the cause of action (opens in a new tab)•
Sahvelo has read four of these eight states straight through at their own sources. In the other four, at least one answer above is marked not established — that mark is what Sahvelo knows, not a gap it is working around. Another state's rule may differ, and we would rather say that than generalize. The absence of a general duty in New York's protective-services section is not a statement that no New York statute reaches your profession; it is what that section establishes. On the agent question, Sahvelo has read one section of each state's law and no more: Arizona's power-of-attorney capacity provision, California's third-person refusal section, Florida's rejection section and New York's acceptance section. None of these is the whole of that state's law on an agent who steals, and none of them is a substitute for asking the institution what it is relying on.
Questions people ask about this
-
What if I report and I am wrong?
A report made in good faith is the ordinary case, and the protective-services systems are built on the assumption that reporters are describing a concern rather than proving a case. Arizona goes further and prohibits retaliation against a person who reports in good faith. The investigation exists precisely because the reporter is not expected to know.Source 4 -
My parent has capacity and does not want help. Can anyone do anything?
Not much, and this is the hardest fact on this page. An adult with capacity can decline protective services and can continue giving money away. What remains available: report anyway so the state has a record, protect any assets you have legitimate authority over, freeze the credit files, and keep the relationship intact so that you are still there when they change their mind. -
Can the money be recovered?
Sometimes, partly. Recent electronic transfers are the best case, and speed is everything. Wires, cash withdrawals, gift cards and cryptocurrency are usually gone. A criminal prosecution can produce a restitution order, and civil claims exist, but both are slow and neither is a reliable route to being made whole. -
Can I report anonymously?
The programs generally accept reports without requiring the reporter to be named, though an investigation is easier where the caseworker can call you back. If you are a mandated reporter in your state, anonymity does not discharge the duty — the report still has to be made. -
Reporting takes weeks. Can anyone stop the money now?
A brokerage can. FINRA's rule lets a firm place a temporary hold on a disbursement or a securities transaction where it reasonably believes exploitation has occurred, is occurring or will be attempted, and it must start an internal review immediately. The threshold is the firm's reasonable belief rather than anything you have to prove, so it is worth calling and asking for a hold and a review by name. Banks are outside that rule and have their own routes — ask what theirs is.Source 2Source 3 -
What is a trusted contact and should my parent have one?
It is a name the account holder gives the firm in advance, and it is who the firm may notify if it places a hold or has concerns. It carries no authority over the account — the person cannot trade, withdraw or see balances by virtue of it. Adding one takes a phone call. If nobody is named, a firm that becomes worried may have no one outside the household to call, which is precisely the situation where a call matters.Source 3 -
The person taking the money is the one with the power of attorney. Does that make it legal?
No. FINRA's definition of financial exploitation expressly includes conduct carried out through a power of attorney, a guardianship or any other authority. Holding the document gives the legal power to move money; it does not license using that power to convert it or to obtain control through undue influence. A firm can place a hold notwithstanding the document, and is not obliged to notify a party it reasonably believes is involved. An agent under a power of attorney owes duties to the principal, can be removed, and can be held to account for what they took. What to do next turns on one thing: if your parent still has capacity, revoking the document is immediate and is the first step. If they do not, this needs an attorney quickly, because the agent's authority continues until a court ends it.Source 2Source 3 -
The bank says it cannot discuss my parent's account with me. Is that the end of it?
No, and the refusal is usually accurate rather than obstructive — without authority on the account, the institution cannot disclose information to you. But disclosure is only one direction of travel. You can give information without receiving any: a fraud or elder-protection team can be told what you have seen, and nothing stops them acting on it. Ask to report a concern rather than to discuss the account, and ask whether a trusted contact is on file. If your parent is willing and able, the cleanest fix is to have them make the call with you present, or add you to the account or as a trusted contact. One thing worth knowing when you make that call: federal law gives a bank and its trained compliance staff immunity from civil and administrative liability for reporting suspected exploitation in good faith. You are not asking them to take a risk, and asking for the compliance or Bank Secrecy Act officer reaches the roles that protection is written around.Source 15 -
Does it matter whether this is a stranger scamming my parent or a family member?
Yes, at almost every step. With an outside scammer the parent is usually cooperating with someone they have misjudged, the money moves through identifiable channels, and the reporting path runs to law enforcement and fraud reporting systems; the obstacle is persuading your parent the person is not who they say. Where the suspect is a relative, a caregiver or the agent under a power of attorney, the person has lawful access, the transactions look authorized, and the levers are different: revoking authority, the institution declining to act on a document, and a protective-services report about a specific named person. Treating the two as one problem — elder fraud — is what sends families to the wrong door. -
My parent sent the money voluntarily. Is anything recoverable?
Sometimes, but assume less than you would like, and act on the assumption that speed is the only variable you control. A transfer the account holder authorized is not an unauthorized transaction, which is the category most consumer protections are built around, so the argument is usually about deception or undue influence rather than about an error the institution must reverse. Wires, cash, gift cards and cryptocurrency are the hardest, often effectively gone. That is precisely why the protective steps — a hold on what has not yet moved, the trusted contact, closing the routes still open — matter more than pursuing what already has. -
My mother fell for an online scam. What do we do now?
Move in this order. Tell the bank or brokerage today, because speed is what decides whether anything can be stopped or reversed. Ask what protective steps are available on the account — alerts, a trusted contact, a hold — and put them on before anything else. Change the passwords and check whether the email account itself was reached, because that is what lets a second attempt succeed. Report it, so it is on record. And do not begin with a conversation about how it happened: shame is what stops the next one being mentioned, and the next one is the one you want to hear about early.
Official links you'll need
Every link goes directly to the issuing agency or the official tool, and opens in a new tab.
-
Find local help through the Eldercare Locator (opens in a new tab)
-
Report a scam or fraud to the FTC (opens in a new tab)
-
Read the Justice Department's elder justice resources (opens in a new tab)
-
Read the CFPB on protecting older adults from exploitation (opens in a new tab)
-
Read how Social Security handles representative payees (opens in a new tab)
-
Read Arizona's duty to report (A.R.S. §46-454) (opens in a new tab)
-
Read California's mandated reporter rule (Welf. & Inst. Code §15630) (opens in a new tab)
-
Read Florida's mandatory reporting rule (Fla. Stat. §415.1034) (opens in a new tab)
-
Read New York's protective services section (Soc. Serv. Law §473) (opens in a new tab)
Where this sits in the process
Related
- Power of attorneythe instrument most often abused, and the one that has to be replaced
- Essential documentsknowing what exists is what makes a change detectable
- Starting the conversationraising money before there is a crisis
- Beneficiary designationsa changed designation is exploitation that only surfaces after a death
- Debts and creditorscollectors targeting a grieving family are the same problem in a different season
- Adding your name to an accountthe account arrangement to ask for, and the one that makes the money reachable by somebody else
- Helping with moneythe ordinary version of this, before anything has gone wrong
Sources
The reporting duties are quoted from the statute that creates them in each state. The national entry point is the federal service that operates it.
-
Eldercare Locator — HHS Administration for Community Living (opens in a new tab)
The Eldercare Locator: the national route to a local protective service.
-
FINRA Rule 2165 — financial exploitation of specified adults (opens in a new tab)
FINRA Rule 2165: when a brokerage may place a temporary hold, and why holding a power of attorney is not an answer to the question.
-
FINRA Rule 2165(b) — notification, and the trusted contact person (opens in a new tab)
FINRA Rule 2165(b): the two-business-day notification, the carve-out for a suspected exploiter, and the trusted contact person.
-
Arizona Revised Statutes §46-454 — Arizona State Legislature (opens in a new tab)
Arizona: who must report, where, and the penalty for silence.
-
California: the mandated reporter class and the reporting timetable.
-
California: bank and credit union staff as mandated reporters of financial abuse.
-
Florida Statutes §415.1034 — The Florida Senate (opens in a new tab)
Florida: the duty on any person, and the central abuse hotline.
-
New York Social Services Law §473 — New York State Senate (opens in a new tab)
New York: the district's duty to investigate, and where the reporting duty actually falls.
-
Florida: an adult-protective-services report about the agent as a ground for refusing their power of attorney.
-
Florida: what it costs an institution to refuse a power of attorney wrongly.
-
New York: reasonable cause to refuse an agent, including a report alleging exploitation.
-
N.Y. Gen. Oblig. Law §5-1504(3) — the ten-business-day response clock (opens in a new tab)
New York: the ten-business-day clock, the written rejection, and the house-form refusal that is not permitted.
-
A.R.S. §14-5506 — powers of attorney, intimidation, deception (opens in a new tab)
Arizona: the capacity burden-shift where the parent was a vulnerable adult when the document was signed.
-
California: fee-shifting against a refusing institution, and the good-faith exception where an agent is exceeding their authority.
-
Federal: immunity for a financial institution and its trained staff reporting suspected exploitation.
Sources last reviewed 2026-08-12. Where a source is marked pending re-verification, the page says so wherever the claim appears.